M5: OS and web security - C.9 Flashcards

1
Q

What is the main protocol for data transfer between web browsers and servers?

M5: OS and web security - C.9

A

HTTP (Hypertext Transfer Protocol).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does HTTPS stand for?

M5: OS and web security - C.9

A

HTTP Secure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the purpose of the Domain Name System (DNS)?

M5: OS and web security - C.9

A

To define a scheme of hierarchical domain names and translate them into IP addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a URL?

M5: OS and web security - C.9

A

A Uniform Resource Locator, which specifies the source locations of files and web pages.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the role of HTML in web pages?

M5: OS and web security - C.9

A

HTML (Hypertext Markup Language) is used to format and display content on web pages.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is JavaScript used for in HTML documents?

M5: OS and web security - C.9

A

To execute code that manipulates the displayed page and underlying document object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the Same-Origin Policy (SOP)?

M5: OS and web security - C.9

A

A security measure that isolates documents from different origins to prevent interference.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is a cookie in the context of web browsing?

M5: OS and web security - C.9

A

A small data string passed from a server to a client, used to retain state across HTTP requests.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a session cookie?

M5: OS and web security - C.9

A

A cookie stored in browser memory that is deleted after the window closes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does the Secure attribute in a cookie do?

M5: OS and web security - C.9

A

Ensures the cookie is only sent over HTTPS, not HTTP.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is Cross-Site Scripting (XSS)?

M5: OS and web security - C.9

A

An attack where malicious scripts are injected into trusted websites.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is SQL Injection?

M5: OS and web security - C.9

A

An attack that involves inserting malicious SQL queries into input fields to manipulate databases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Cross-Site Request Forgery (CSRF)?

M5: OS and web security - C.9

A

An attack that tricks a user into performing actions on a different site without their knowledge.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the purpose of the HTTP Referer header?

M5: OS and web security - C.9

A

To hold the URL of the page from which a request was made.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is an HTTP proxy?

M5: OS and web security - C.9

A

An intermediary server that negotiates access to endpoint server resources and relays responses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the CONNECT method in HTTP?

M5: OS and web security - C.9

A

A method used to set up a TCP connection to a server and relay encrypted data.

17
Q

What is the main goal of TLS (Transport Layer Security)?

M5: OS and web security - C.9

A

To provide a secure channel between two endpoints.

18
Q

What is a pre-shared key (PSK) in TLS?

M5: OS and web security - C.9

A

A long-term secret used for key establishment in TLS connections.

19
Q

What is the purpose of the TLS handshake?

M5: OS and web security - C.9

A

To establish cryptographic parameters and authenticate the server to the client.

20
Q

What is the Record Layer in TLS?

M5: OS and web security - C.9

A

The layer that protects application data using negotiated parameters.

21
Q

What is the DOM (Document Object Model)?

M5: OS and web security - C.9

A

A hierarchical structure representing an HTML document, used to access and manipulate web page content.

22
Q

What is the window.location property in the DOM?

M5: OS and web security - C.9

A

It represents the URL of the document displayed in the window.

23
Q

What is the purpose of the Path attribute in a cookie?

M5: OS and web security - C.9

A

To control which origin server pages a cookie is returned to.

24
Q

What is the HttpOnly attribute in a cookie?

M5: OS and web security - C.9

A

It makes the cookie accessible only through HTTP, not via JavaScript.

25
Q

What is the main function of a web form in HTML?

M5: OS and web security - C.9

A

To solicit user input and send it to a server via an HTTP request.

26
Q

What is the purpose of the meta refresh tag in HTML?

M5: OS and web security - C.9

A

To redirect the browser to a new URL after a specified time.

27
Q

What is the purpose of the Location header in an HTTP response?

M5: OS and web security - C.9

A

To specify the target URL for redirection.

28
Q

What is the main security concern with HTTP proxies?

M5: OS and web security - C.9

A

They can be used for middle-person attacks if not trustworthy.

29
Q

What is the main difference between HTTP and HTTPS?

M5: OS and web security - C.9

A

HTTPS uses TLS to encrypt data, providing a secure channel.

30
Q

What is the main challenge with providing meaningful security indicators to users?

M5: OS and web security - C.9

A

Making them intuitive and simple to avoid dangerous errors.